Описание
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1:5.19-1ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 1:5.14-2ubuntu3.1 |
| lucid | not-affected | 5.03-5ubuntu1.2 |
| precise | released | 5.09-2ubuntu0.4 |
| saucy | released | 5.11-2ubuntu4.3 |
| trusty | released | 1:5.14-2ubuntu3.1 |
| trusty/esm | not-affected | 1:5.14-2ubuntu3.1 |
| upstream | released | 1:5.19-1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 5.5.12+dfsg-2ubuntu3 |
| esm-infra-legacy/trusty | not-affected | 5.5.9+dfsg-1ubuntu4.3 |
| lucid | not-affected | |
| precise | not-affected | |
| saucy | released | 5.5.3+dfsg-1ubuntu2.6 |
| trusty | released | 5.5.9+dfsg-1ubuntu4.3 |
| trusty/esm | not-affected | 5.5.9+dfsg-1ubuntu4.3 |
| upstream | released | 5.6.0~rc1+dfsg-1 |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
Buffer overflow in the mconvert function in softmagic.c in file before ...
Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion.
Уязвимость программного обеспечения PHP, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации
EPSS
5 Medium
CVSS2